{"id":"CVE-2022-27227","aliases":["ALPINE-CVE-2022-27227","DEBIAN-CVE-2022-27227","EUVD-2022-31736","GHSA-67fj-vc46-4xmv","UBUNTU-CVE-2022-27227","USN-7203-1","openSUSE-SU-2022:0105-1","openSUSE-SU-2024:11954-1","openSUSE-SU-2024:11955-1"],"status":"published","title":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and...","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.05185,"percentile":0.92576,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-03-25T14:41:44Z","modified":"2026-11-03T08:01:09Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"pdns","fixed_in":["4.5.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"pdns","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"pdns-recursor","fixed_in":["4.5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"pdns-recursor","fixed_in":["4.6.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pdns","fixed_in":["4.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pdns","fixed_in":["4.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pdns","fixed_in":["4.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pdns-recursor","fixed_in":["4.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pdns-recursor","fixed_in":["4.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pdns-recursor","fixed_in":["4.6.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","fixed_in":["4.1.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns-recursor","fixed_in":["4.1.1-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns","fixed_in":["4.2.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns-recursor","fixed_in":["4.2.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns","fixed_in":["4.5.3-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns-recursor","fixed_in":["4.6.0-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP3","package":"pdns-recursor","fixed_in":["4.3.5-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"pdns-recursor","fixed_in":["4.3.5-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"pdns","fixed_in":["4.6.1-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"pdns-recursor","fixed_in":["4.6.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.5-1build2","3.4.6-2","3.4.6-3","3.4.7-1","3.4.7-2","4.0.0~alpha1-1","4.0.0~alpha2-2","4.0.0~alpha2-3","4.0.0~alpha2-3build1","4.0.0~alpha2-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.3-1","4.0.0~alpha1-1","4.0.0~alpha1-2","4.0.0~alpha2-2","4.0.0~alpha2-2ubuntu0.1","4.0.0~alpha2-2ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1ubuntu0.1~esm1"}]}],"versions":["4.0.4-2","4.0.4-2build1","4.0.5-1","4.1.0-1","4.1.0-2","4.1.0-2build1","4.1.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-2ubuntu0.1~esm1"}]}],"versions":["4.0.6-1","4.0.6-1build1","4.0.7-1","4.1.1-1","4.1.1-1build1","4.1.1-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.1.6-3build1","4.2.0-1","4.2.1-1","4.2.1-1build1","4.2.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.2.0-6","4.2.1-1","4.2.1-1build1","4.2.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-1ubuntu0.1~esm1"}]}],"versions":["4.4.1-1build1","4.4.1-3","4.4.1-4","4.5.2-1build1","4.5.3-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-1ubuntu1+esm1"}]}],"versions":["4.4.2-3","4.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-3ubuntu0.1~esm1"}]}],"versions":["3.4.5-1build2","3.4.6-2","3.4.6-3","3.4.7-1","3.4.7-2","4.0.0~alpha1-1","4.0.0~alpha2-2","4.0.0~alpha2-3","4.0.0~alpha2-3build1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-2ubuntu0.1+esm1"}]}],"versions":["3.7.3-1","4.0.0~alpha1-1","4.0.0~alpha1-2","4.0.0~alpha2-2","4.0.0~alpha2-2ubuntu0.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1ubuntu0.1~esm1"}]}],"versions":["4.0.4-2","4.0.4-2build1","4.0.5-1","4.1.0-1","4.1.0-2","4.1.0-2build1","4.1.1-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-2ubuntu0.1~esm1"}]}],"versions":["4.0.6-1","4.0.6-1build1","4.0.7-1","4.1.1-1","4.1.1-1build1","4.1.1-2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.1.6-3build1","4.2.0-1","4.2.1-1","4.2.1-1build1","4.2.1-1build2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.2.0-6","4.2.1-1","4.2.1-1build1","4.2.1-1build2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-1ubuntu0.1~esm1"}]}],"versions":["4.4.1-1build1","4.4.1-3","4.4.1-4","4.5.2-1build1","4.5.3-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-1ubuntu1+esm1"}]}],"versions":["4.4.2-3","4.6.0-1ubuntu1"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"powerdns","product":"authoritative_server"},{"vendor":"powerdns","product":"recursor"}],"references":[{"url":"https://docs.powerdns.com/recursor/security-advisories/index.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://doc.powerdns.com/authoritative/security-advisories/index.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-01.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2022/03/25/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QKN56VWXUVFOYGUN75N5IRNK66OHTHT/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEABZA46XYEUWMGSY2GYYVHISBVWEHIO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJSKICB67SPPEGNXCQLZVSWR6QGCN3KP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPHOFNI7FKM5NNOVDOWO4TBXFAFICCUE/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27227","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2QKN56VWXUVFOYGUN75N5IRNK66OHTHT/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HEABZA46XYEUWMGSY2GYYVHISBVWEHIO/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPHOFNI7FKM5NNOVDOWO4TBXFAFICCUE/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJSKICB67SPPEGNXCQLZVSWR6QGCN3KP/"},{"url":"https://github.com/advisories/GHSA-67fj-vc46-4xmv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-27227","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27227.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-27227","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-27227","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/03/25/1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27227","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7203-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-17482","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42XLX5GUN36HINIJX75C5RSFWMGRN4OW/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1197525","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27227","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-27227","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","status":"published","published":"2022-03-25T14:41:44Z","modified":"2024-08-03T05:25:32.569Z","updated_at":"2026-11-02T14:34:34.250357Z"}],"euvd":[{"id":"EUVD-2022-31736","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","status":"published","published":"2022-03-25T14:41:44Z","modified":"2024-08-03T05:25:32Z","updated_at":"2026-11-03T03:25:43.539822Z"}],"ghsa":[{"id":"GHSA-67fj-vc46-4xmv","title":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and...","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","status":"published","published":"2022-03-26T00:00:32Z","modified":"2023-01-27T05:01:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T14:41:48.523978Z"}],"nvd":[{"id":"CVE-2022-27227","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","status":"published","published":"2022-03-25T15:15:07.697Z","modified":"2026-06-17T04:36:32.04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:14.24948Z"}],"osv":[{"id":"ALPINE-CVE-2022-27227","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","status":"published","published":"2022-03-25T15:15:07.697Z","modified":"2026-11-03T07:30:35.100153205Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"DEBIAN-CVE-2022-27227","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","status":"published","published":"2022-03-25T15:15:07.697Z","modified":"2026-11-03T08:01:09.48755601Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"UBUNTU-CVE-2022-27227","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","status":"published","published":"2022-03-25T15:15:00Z","modified":"2026-02-04T02:19:04.090278Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CVE-2022-27227","description":"In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.","status":"published","published":"2022-03-25T14:41:44Z","modified":"2026-10-28T02:31:13.684484558Z","updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"openSUSE-SU-2022:0105-1","title":"Security update for pdns-recursor","description":"This update for pdns-recursor fixes the following issues:\n\n- CVE-2022-27227: Fixed incomplete validation of  incoming IXFR\n  transfers. It applies to setups retrieving one or more RPZ zones from\n  a remote server if the network path to the server  is not\n  trusted. (boo#1197525)\n","status":"published","published":"2022-04-07T04:02:44Z","modified":"2026-02-04T02:17:48.9201Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11954-1","title":"pdns-4.6.1-1.1 on GA media","description":"These are all security issues fixed in the pdns-4.6.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:02:32.393018Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:11955-1","title":"pdns-recursor-4.6.1-1.1 on GA media","description":"These are all security issues fixed in the pdns-recursor-4.6.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:29:22.962557Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"USN-7203-1","title":"pdns, pdns-recursor vulnerabilities","description":"Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled\nmemory when accessing certain files. An attacker could possibly use this\nissue to achieve arbitrary code execution. (CVE-2018-1046)\n\nIt was discovered that PowerDNS Authoritative Server and PowerDNS Recursor\nincorrectly handled memory when receiving certain remote input. An attacker\ncould possibly use this issue to cause denial of service. (CVE-2018-10851)\n\nKees Monshouwer discovered that PowerDNS Authoritative Server and PowerDNS\nRecursor incorrectly handled request validation after having cached\nmalformed input. An attacker could possibly use this issue to cause denial\nof service. (CVE-2018-14626)\n\nToshifumi Sakaguchi discovered that PowerDNS Recursor incorrectly handled\nrequests after having cached malformed input. An attacker could possibly\nuse this issue to cause denial of service. (CVE-2018-14644)\n\nNathaniel Ferguson discovered that PowerDNS Authoritative Server\nincorrectly handled memory when receiving certain remote input. An attacker\ncould possibly use this issue to obtain sensitive information.\n(CVE-2020-17482)\n\nNicolas Dehaine and Dmitry Shabanov discovered that PowerDNS Authoritative\nServer and PowerDNS Recursor incorrectly handled IXFR requests in certain\ncircumstances. An attacker could possibly use this issue to cause denial of\nservice. (CVE-2022-27227)\n","status":"published","published":"2025-01-14T13:40:35Z","modified":"2026-06-25T13:32:30.073988287Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}